$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa File: 893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa (raw, json) Hash identifier: p0qFPsfOF7kNaw3NYHA3J53NXJRhmOMIIEILEbj8/CM= Subject key identifier: 32:DF:15:39:EA:38:CE:34:78:44:93:E6:6A:5F:79:DB:ED:3F:52:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9FF54673EA23BCF77300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 184.20.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9f:f5:46:73:ea:23:bc:f7:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f7ac04d9-1b4e-4201-a8ed-50aebf07f5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:35:5c:58:6b:8d:fc:84:fb:00:dc:b2:c1: c4:02:1d:58:e3:f4:27:00:7e:4a:d1:d5:bf:9b:f3: c6:be:8c:63:99:33:4d:59:e7:4e:c8:cf:91:6b:8e: a6:72:6b:27:a2:e1:f7:00:63:4d:31:a4:b3:65:fc: 63:56:07:5d:18:08:f5:1b:cc:22:f0:fc:ec:3c:80: d1:e4:57:16:ca:ea:66:bb:55:5f:a4:7f:5a:e2:9e: 7c:81:1d:70:d1:ee:1a:7c:c2:ff:af:e6:e7:a7:42: dc:d4:42:02:18:05:f8:23:7a:0d:0c:11:62:64:1f: 8e:95:dd:9a:cf:3a:77:0d:20:3a:73:93:f2:c9:2a: 7c:ce:59:1c:70:8e:49:34:fd:b9:1c:24:59:7a:50: 6c:38:7e:0d:d5:aa:c6:11:3b:ab:bc:82:57:f7:d1: 20:95:6f:84:6b:3b:13:03:77:b7:7e:ae:cc:5d:ee: 33:3b:0d:4f:c3:44:c9:20:6b:6c:b7:32:9d:13:91: 99:51:f2:c5:ff:05:23:5c:ee:30:9e:93:7c:86:2a: 3b:b9:5b:c1:b4:fc:eb:42:8e:44:26:8b:ee:f1:a8: 90:87:f4:55:22:d0:81:dc:f1:06:fa:94:b7:79:80: dd:4f:84:0d:d3:8d:c0:8a:a5:0a:42:2c:fb:e9:95: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:15:39:EA:38:CE:34:78:44:93:E6:6A:5F:79:DB:ED:3F:52:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/893c1d03-4a79-3864-8cc1-3288f60ff2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5a:30:22:ca:90:53:4f:e6:85:d7:ff:32:ae:99:13:b5:6f: 32:1b:67:36:7b:14:e3:6f:a6:3e:c5:60:f1:c8:5e:d2:da:e3: c2:fa:a0:23:49:5e:34:d8:47:11:b6:34:e7:eb:cf:1f:17:8a: 80:f8:fc:79:79:4f:21:87:ed:9d:92:7d:19:bc:23:4a:57:3b: 85:68:ef:b3:35:28:af:f2:2f:c1:6b:ec:f8:13:90:86:67:d8: 4b:2b:20:49:7d:fe:02:c5:2d:c4:30:f2:4e:e2:52:a7:1b:29: 90:e2:a4:14:9c:be:d5:11:0a:06:71:ee:8b:17:3f:4f:cd:05: e7:09:0a:a6:76:00:2b:9c:a5:15:39:b3:7c:bc:d3:8c:21:94: 90:41:b1:18:ec:a5:46:9d:c1:ac:5f:b7:12:27:ff:5c:46:7f: fa:ba:d7:c2:95:ab:da:69:9a:e8:c0:66:b6:86:fd:be:d0:3f: cb:7f:07:c9:3d:47:b1:4f:46:95:11:85:49:fd:2c:c4:72:50: 0c:1a:e0:10:35:b3:9b:7a:4c:08:42:67:41:60:51:09:03:0c: cc:11:30:b5:c7:15:71:39:b3:79:ff:ee:8a:dd:34:eb:a8:17: 2e:be:3f:08:85:1f:24:bf:73:ab:c0:b1:01:05:d8:a1:4a:0d: da:e3:c4:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkup/1RnPqI7z3cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjdhYzA0ZDktMWI0ZS00MjAxLWE4ZWQtNTBhZWJmMDdmNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1w1XFhrjfyE+wDcssHEAh1Y4/QnAH5K0dW/ m/PGvoxjmTNNWedOyM+Ra46mcmsnouH3AGNNMaSzZfxjVgddGAj1G8wi8PzsPIDR 5FcWyupmu1VfpH9a4p58gR1w0e4afML/r+bnp0Lc1EICGAX4I3oNDBFiZB+Old2a zzp3DSA6c5PyySp8zlkccI5JNP25HCRZelBsOH4N1arGETurvIJX99EglW+EazsT A3e3fq7MXe4zOw1Pw0TJIGtstzKdE5GZUfLF/wUjXO4wnpN8hio7uVvBtPzrQo5E Jovu8aiQh/RVItCB3PEG+pS3eYDdT4QN043AiqUKQiz76ZX0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLfFTnqOM40eEST5mpfedvtP1KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODkzYzFkMDMtNGE3OS0z ODY0LThjYzEtMzI4OGY2MGZmMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJaMCLKkFNP5oXX/zKumRO1bzIbZzZ7FONvpj7FYPHIXtLa48L6oCNJ XjTYRxG2NOfrzx8XioD4/Hl5TyGH7Z2SfRm8I0pXO4Vo77M1KK/yL8Fr7PgTkIZn 2EsrIEl9/gLFLcQw8k7iUqcbKZDipBScvtURCgZx7osXP0/NBecJCqZ2ACucpRU5 s3y804whlJBBsRjspUadwaxftxIn/1xGf/q618KVq9ppmujAZraG/b7QP8t/B8k9 R7FPRpURhUn9LMRyUAwa4BA1s5t6TAhCZ0FgUQkDDMwRMLXHFXE5s3n/7ordNOuo Fy6+PwiFHyS/c6vAsQEF2KFKDdrjxAo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:10:38 2025 by rpki-client